Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3xfm-x84x-qwwq

Опубликовано: 15 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 3.7

Описание

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

EPSS

Процентиль: 5%
0.0002
Низкий

3.7 Low

CVSS3

Дефекты

CWE-674

Связанные уязвимости

CVSS3: 3.7
ubuntu
2 месяца назад

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

CVSS3: 3.7
redhat
2 месяца назад

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

CVSS3: 3.7
nvd
2 месяца назад

A flaw was identified in the RelaxNG parser of libxml2 related to how external schema inclusions are handled. The parser does not enforce a limit on inclusion depth when resolving nested <include> directives. Specially crafted or overly complex schemas can cause excessive recursion during parsing. This may lead to stack exhaustion and application crashes, creating a denial-of-service risk.

msrc
2 месяца назад

Libxml2: unbounded relaxng include recursion leading to stack overflow

CVSS3: 3.7
debian
2 месяца назад

A flaw was identified in the RelaxNG parser of libxml2 related to how ...

EPSS

Процентиль: 5%
0.0002
Низкий

3.7 Low

CVSS3

Дефекты

CWE-674